Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: p0t1EMQm7CH1miAaKjeBuXJ/LjIfHUap/zYvNKo+G2E=
Subject key identifier: 8F:3E:68:EF:FD:69:81:D8:56:CE:76:9A:6E:9A:0A:8C:AB:DE:CB:6A
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 515B59E0BFFF292ED0746503C185A47F95306895
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS31898.roa
Signing time: Mon 30 Jun 2025 14:59:43 +0000
ROA not before: Mon 30 Jun 2025 14:54:43 +0000
ROA not after: Mon 29 Jun 2026 14:59:43 +0000
asID: 31898
IP address blocks: 2a05:dfc3:f6ce::/48 maxlen: 48
2a0a:6044:6d00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:5b:59:e0:bf:ff:29:2e:d0:74:65:03:c1:85:a4:7f:95:30:68:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Jun 30 14:54:43 2025 GMT
Not After : Jun 29 14:59:43 2026 GMT
Subject: CN=8F3E68EFFD6981D856CE769A6E9A0A8CABDECB6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:6e:92:a3:df:88:45:18:99:09:7c:07:bb:
d0:24:e7:1c:32:52:91:f0:62:30:4b:b2:82:a4:ad:
a6:33:a7:d4:37:89:ae:7d:dd:bb:b5:af:2e:2a:9a:
f7:f6:4d:3c:dc:2f:2b:fa:33:8e:27:80:72:8d:10:
6c:5f:ea:a1:26:42:89:87:3d:57:69:39:ac:67:f7:
30:f8:db:b9:92:47:30:88:fa:b3:35:95:a9:b0:95:
db:d7:dd:66:eb:04:41:7c:ae:ae:01:ee:86:1e:38:
f9:2e:f9:2d:3f:dd:b3:ea:97:97:44:55:42:87:d4:
1f:f9:da:c7:63:26:ee:6e:b4:2c:c5:c5:ca:c6:12:
93:04:ef:69:a3:6a:7a:b9:e7:de:cd:4b:83:b7:0f:
0d:0d:d2:98:83:46:14:81:4b:dc:08:40:07:09:46:
dc:0a:a6:7b:c6:d0:4e:d9:0c:2b:24:05:39:e8:30:
0c:59:8b:59:bf:dc:a4:a9:03:ec:14:2e:c0:92:33:
4d:06:d6:9a:b2:4c:11:1b:0a:23:3f:c4:89:6b:41:
19:4c:66:4b:b0:af:ee:52:c4:4e:d0:81:03:0a:74:
3e:7e:45:c8:e4:4a:e0:54:e5:e9:b2:e7:d6:1e:69:
10:96:bf:b9:37:e4:69:45:41:36:41:ed:c3:42:bb:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3E:68:EF:FD:69:81:D8:56:CE:76:9A:6E:9A:0A:8C:AB:DE:CB:6A
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc3:f6ce::/48
2a0a:6044:6d00::/48
Signature Algorithm: sha256WithRSAEncryption
3b:df:7b:a5:f4:04:fe:cb:e9:1e:21:95:89:bb:c8:1a:ae:bc:
3c:3a:c0:1b:2a:eb:7b:ec:a5:d3:39:f2:a2:8c:15:84:19:d7:
a0:eb:9a:f0:c0:1f:3c:10:20:58:e0:eb:b6:a1:f4:c8:e2:cf:
6b:8a:9a:13:09:02:9d:2a:11:a9:8d:b9:71:62:4d:b2:d6:33:
c4:7d:d1:be:7b:9c:f9:60:90:14:7e:8f:56:23:6e:78:9e:22:
40:b4:07:31:5e:50:50:22:e6:53:f1:b4:02:5e:6b:4c:80:e0:
d1:0e:e9:e7:35:08:1d:d2:cd:e3:0c:a9:38:5c:0e:b5:5e:12:
85:2d:22:62:ea:75:a5:c3:31:61:70:ba:7e:1e:ee:5b:da:78:
a9:d2:f4:a3:f1:85:91:95:00:96:0f:9a:4c:b8:91:bd:fb:75:
7c:51:19:3d:5d:65:91:20:aa:da:e8:4f:7a:34:bf:bb:d5:55:
d9:12:15:67:9d:af:1a:2d:db:fe:df:6d:83:c9:84:08:0d:13:
9a:c0:52:06:7a:f2:a2:fc:e5:17:1d:7c:c2:07:ff:1a:09:a8:
7c:37:fd:63:9a:64:19:89:4f:89:ca:03:90:c0:c8:a6:72:2e:
5c:66:ea:e9:70:78:b3:10:f0:a9:0e:ec:91:a8:3b:fc:6e:b2:
7f:31:9c:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:29:58 2025 by rpki-client